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Listing of Claims 

This listing of claims is a complete listing and supersedes any prior listing of claims in 
this application. 

1 . (Currently Amended) A method of administering user access to application programs 
on a computer system, comprising the steps of: 

providing a user database, comprising a user profile for each user, 
providing a task database of tasks,, and 

providing a user-specific list of allowed tasks, comprising allowed application 
programs; 

running a system administration program to configure the user-specific list of 
allowed tasks on the basis of the user profile in the user database and the task database 
^database; 

a system administration program detecting a command to execute a task; and 
preventing execution of tasks referred to of which the execution is initiated by the 
detected command , on determining that said tasks are not on the list of allowed tasks. 

2. (Original) A method according to claim 1, wherein the list of allowed tasks is 
configured at least once every time a user has entered a request to log on to the computer 
system. 

3. (Previously presented) A method according to claim 2, wherein the database of tasks 
further comprises time interval information specifying time intervals in which a task may 
be executed, and an additional step of configuring the list of allowed tasks based upon 
the time interval information and the time indicated by a system clock. 

4. (Previously presented) A method according to claim 1, wherein the database of tasks 
further comprises information for linking tasks to other tasks that invoke the tasks during 
execution of an application program. 
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5. (Original) A method according to claim 1, wherein, in a simulation mode, at least one 
task that is not on the list of allowed tasks is allowed to execute, and tasks started during 
execution are registered. 

6. (Previously presented) A method according to claim 2, wherein the computer system 
is a distributed computer system comprising a plurality of computer terminals connected 
to a network, and wherein the task database further comprises location-dependent 
information, the method further comprising and additional step of registering the terminal 
on which the user has entered the request and configuring the list of allowed tasks on the 
basis of the location-dependent information and the registered terminal. 

7. (Previously presented) A method according to claim 1, wherein a plurality of user 
groups is defined, a group membership list being provided with the user database for 
each user, links being provided between the tasks in the task database and the groups, 
and the links and the group membership list being used to configure the list of allowed 
tasks. 

8. (Previously presented) Method according to claim 7, wherein a plurality of user 
functions is defined, a user function list being provided with the user database for each 
user, links being provided between the tasks in the database of tasks and the user 
functions, and the links and the user function list being used to configure the list of 
allowed tasks. 

9. (Original) A method according to claim 1, wherein prevention of the execution of an 
application program or task is registered, and wherein a notification of the prevention is 
sent to a system administrator. 

10. (Previously presented) A method according to claim 1, wherein one or more tasks 
are defined for not preventing execution in the task database, and wherein execution of 
such a task is also not prevented if it is not on the list of allowed tasks. 
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1 1 . (Previously presented) Method according to claim 5, wherein one or more tasks are 
defined for always preventing execution in the task database , and wherein execution of 
such a task is prevented in the simulation mode. 

12. (Currently Amended) A computer system comprising: 

means for generating a user-specific list of allowed tasks, comprising allowed 
application programs; 

means -a system administration program for detecting a command to execute a 

task; 

means for preventing execution of tasks referred to of which the execution is 
initiated by the detected command-fea t, on determined that said tasks are not on the list 
of allowed tasks; 

a user database and a task database ; database; and 

means for configuring the user-specific list of allowed tasks on the basis of the 
user's user profile in the user database and of the task database. 

13. (Previously Presented) A computer system according to claim 12, wherein said 
means for generating a user-specific list of allowed tasks is programmed to configure the 
list of allowed tasks at least once every time a user has entered a request to log on to the 
computer system. 

14. (Original) A computer system according to claim 12, wherein the database of tasks 
comprises information linking tasks to other tasks that can invoke the tasks during 
execution of an application program. 

15. (Previously Presented) A computer system according to claim 12, is capable of being 
run in a simulation mode in which the computer system is programmed to allow at least 
one task that is not on the list of allowed task to execute and to register tasks started 
during execution. 
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16. (Previously Presented) A computer system according to claim 12, further comprising 
means for defining a plurality of user groups and a group membership list, stored with 
the user database, for each user, wherein information linking tasks to the groups is 
comprised in the database of tasks for each task, the computer system being programmed 
to use the links and the group membership list to configure the list of allowed tasks. 

17. (Previously Presented) A computer program comprising computer-readable 
instructions for performing the tasks of: 

generating a user-specific list of allowed tasks, comprising allowed application 
programs; 

reading a task database of tasks and a user database comprising a user profile for 
each use ^user: 

configuring the user-specific list of allowed tasks on the basis of the user's profile 
in the user database and the task database of tasks; 
detecting a command to execute a task; and 

preventing execution of tasks referred to of which the execution is initiated by the 
detected command , on determining that said tasks are not on the list of allowed tasks. 

18. (Previously Presented) A computer program according to claim 17, further 
comprising computer-readable instructions which, when executed, configure the list of 
allowed tasks at least once every time a user has entered a request to log on to the 
computer system. 

19. (Previously Presented) A computer program according to claim 17is capable of being 
run in a simulation mode, and further comprising computer-readable instructions which, 
when executed in the simulation mode, perform the tasks of allowing at least one task to 
execute that is not on the list of allowed tasks; and registering tasks started during 
execution. 

20. (Previously Presented) A computer program according to claim 17, further 
comprising computer-readable instructions, which, when executed perform the tasks of: 
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defining a plurality of user groups, reading a group membership list, stored with the user 
database, for each user; retrieving information linking tasks to the groups, comprised in 
the database of tasks for each task; and using the links and the group membership list to 
configure the list of allowed tasks. 



